Quentin McGaw
3d1e20c555
hotfix(portforward): add missing break statements for log streaming
v3.41.3
2026-07-30 11:49:18 +00:00
Quentin McGaw
44143aa3ba
hotfix(ci): fix secrets access
v3.41.2
2026-07-29 11:18:09 +00:00
Quentin McGaw
56e5cad66b
fix(ci): update if conditions from qdm12/gluetun to passteque/gluetun
2026-07-29 06:26:21 +00:00
Matt Van Horn
c0073c9567
fix(healthcheck): prevent race condition on the healthchecker ( #3400 )
...
Co-authored-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com >
Co-authored-by: Quentin McGaw <quentin.mcgaw@gmail.com >
Thanks also to @arturhoo for also trying to resolve this issue in #3410
2026-07-29 06:19:33 +00:00
Quentin McGaw
cccd7c4c1b
hotfix(command): fix unit test
2026-07-29 06:19:33 +00:00
Quentin McGaw
4ddf7c9a57
fix(command): wait for all stdout and stderr streams to complete correctly
2026-07-29 06:19:33 +00:00
ligistx
a4df514e4b
fix(providers/custom): use proto tcp-client instead of proto tcp ( #3350 )
2026-07-29 05:49:22 +00:00
Quentin McGaw
35847bb3b2
fix(portforwarding): handle empty ports without panicing
2026-07-29 05:49:20 +00:00
Quentin McGaw
d36d0f84d7
fix(command): fix rare race condition on log line stream at command completion
2026-07-29 05:49:18 +00:00
Quentin McGaw
e68b70ff8b
fix(wireguard): skip tun device checks when using kernelspace
2026-07-29 05:49:16 +00:00
Immanuel Tikhonov
73c3ce23da
fix(openvpn/extract): trim spaces in config lines before parsing ( #3327 )
2026-07-29 05:32:50 +00:00
Quentin McGaw
6857210429
fix(provider/pia): handle "port is busy" messages and retry port forwarding logic
2026-07-29 05:32:49 +00:00
Quentin McGaw
0f7f35d6dc
fix(configuration/settings/wireguard): ignore empty address strings
2026-07-29 05:30:23 +00:00
Quentin McGaw
ec71f1881b
fix(provider/pia): update default OpenVPN ports
...
- 8080 for UDP
- 8443 for TCP
- According to https://github.com/pia-foss/manual-connections/commit/8a75e46be81583d17f9ab3570881419b35000969
- Credits to @darthShadow
2026-07-29 05:30:21 +00:00
Quentin McGaw
44f2df6f87
fix(configuration/sources/files/wireguard): fix parsing ipv6 endpoint port
2026-07-29 05:30:18 +00:00
Quentin McGaw
650c61e93c
fix(pia): allow ports 501 and 502 as custom ports given they are the defaults
2026-07-29 05:30:16 +00:00
Quentin McGaw
2f98539848
hotfix(openvpn): fix support for tcp-client
...
- always use `proto tcp-client` when using TCP
- parses `tcp-client` (on top of `tcp`, `tcp4`, `tcp6`) as meaning TCP
- Fix #3302
2026-07-29 05:30:14 +00:00
Quentin McGaw
5c02e2106c
hotfix(pia): fix servers data updater and update servers data
...
- use v7 API endpoint to get correct list of servers
- skip offline regions
- do not skip *.pvt.site
2026-07-29 05:30:12 +00:00
Quentin McGaw
e6815054d9
fix(pia): ignore *.pvt.site regions
2026-07-29 05:30:10 +00:00
Quentin McGaw
9fe34266f0
fix(pia): try x.y.128.1 and x.y.0.1 from the gateway IP to find the API IP address
2026-07-29 05:30:08 +00:00
Quentin McGaw
cdfd644c04
fix(portforward): no longer stuck after failed port forwarding
2026-07-29 05:30:06 +00:00
Quentin McGaw
1c722b0f80
hotfix(dns): fix pool panicing (again)
2026-07-29 05:30:04 +00:00
Quentin McGaw
2e204e11b6
hotfix(dns): fix race condition with DoT pool
2026-07-29 05:30:02 +00:00
Quentin McGaw
c745f61156
fix(privateinternetaccess): use AES-GCM for all presets
2026-07-29 05:29:59 +00:00
Quentin McGaw
4301196c21
fix(privateinternetaccess): remove none encryption preset
2026-07-29 05:29:57 +00:00
Quentin McGaw
ef48826e48
fix(dns): DNS over TLS pool behavior fixed
...
- handle timed out connections the same as closed connections
- close connection on TLS handshake failure
- improve mutex handling during connection renewal and retrieval
2026-07-29 05:29:55 +00:00
Quentin McGaw
3fca8b3dfe
fix(proton): fix updater code
...
- simplest fix ever
- proton: how can you return such obscure error messages
- ai: you suck hard at fixing anything still it's embarassing
2026-07-29 05:29:53 +00:00
Drew Wells
8ab97bb4b4
fix(wireguard): support IPv6 address formatting from config files ( #3273 )
2026-07-29 05:29:51 +00:00
Quentin McGaw
8269fad3b2
fix(server/auth): return 404 or 405 depending on route
...
- Fix #3275
2026-07-29 05:29:49 +00:00
Damoon Tahmasbi
16870d6385
fix(vyprvpn/updater): update OpenVPN configs zip URL ( #3264 )
2026-07-29 05:28:32 +00:00
Quentin McGaw
d41081f4b3
fix(server/portforward): use port and ports for both single port and multiple ports forwarded
2026-07-29 05:28:30 +00:00
Michael Bisbjerg
5fbe277f9c
fix(openvpn): bundle provider CA certificates in one block ( #3258 )
2026-07-29 05:28:28 +00:00
Quentin McGaw
c5b20a3b06
fix(firewall/iptables): shared mutex for both iptables and ip6tables
2026-07-29 05:28:27 +00:00
Quentin McGaw
1b871496ea
fix(ci): set hash of PR commit instead of synthetic commit in docker build argument
2026-07-29 05:24:31 +00:00
Quentin McGaw
05795ad2d1
fix(dns): correct error wrapping for DNS listening address validation
...
- Fix #3216
2026-07-29 05:24:27 +00:00
Quentin McGaw
f9a86f48aa
fix(updater): only uses DoH to cloudflare+google
...
- prevent dns plaintext manipulation both the periodic update and when running in cli mode
- possibly higher reliability on poor connections versus UDP
- drop `-dns` flag in update command
- for now no configuration allowed since it makes everything rather complex
2026-07-29 05:24:03 +00:00
Quentin McGaw
3a39236fa8
fix(expressvpn): remove pakistan server
2026-07-29 05:24:01 +00:00
github-actions[bot]
998ae46e97
feat(airvpn): update servers data ( #3186 )
2026-07-29 05:23:59 +00:00
Dennis Nienhuis
c4e65f8cc7
fix(expressvpn): fix missing characters in CA string ( #3192 )
2026-07-29 05:23:57 +00:00
Dennis Nienhuis
a20795df9e
fix(expressvpn): add new CA3 certificate to fix TLS handshake failure ( #3184 )
2026-07-29 05:22:40 +00:00
Quentin McGaw
78929cd6e1
fix(openvpn/extract): restrict custom openvpn config protocol to tcp or udp internally
...
- Fix #3179
- I believe specifying tcp4, tcp6 or tcp-client does not change anything versus tcp + remote ip address
- I believe specifying udp4 or udp6 does not change anything versus tcp + remote ip address
- Simplify firewall code to not account for tcp-client etc.
2026-07-29 05:22:38 +00:00
Quentin McGaw
75c2404179
fix(privado): allow additional OpenVPN ports 443, 8080 and 8443 for both tcp and udp
2026-07-29 05:22:36 +00:00
Quentin McGaw
bcbc8c41f2
fix(privado): allow OpenVPN TCP protocol
2026-07-29 05:22:34 +00:00
Quentin McGaw
3da0c21c82
fix(mod): probe searches for features built-in the kernel
2026-07-29 05:22:32 +00:00
Quentin McGaw
009b8e45b7
fix(privado): update servers data using JSON API
...
- Fixes #3159
- Fixes #2118
- Fixes #2657
2026-07-29 05:22:29 +00:00
Quentin McGaw
05dc21ed61
fix(all): increase global http client timeout to 35s and precise lower timeouts where needed
...
- Fix DNS blocklists slow downloads, fix #3102
- Leave 35s timeout for updaters
- Set timeouts to 1s for local calls
- Set timeouts to 5s for LAN VPN calls and small external calls
- Set timeouts to 10s external VPN API calls
2026-07-29 05:22:27 +00:00
Quentin McGaw
270dce9acb
fix(dns): skip blocking if block lists download fails
2026-07-29 05:22:25 +00:00
Quentin McGaw
23cf3231f0
fix(healthcheck): corret behavior when HEALTH_RESTART_VPN=off and startup check fails
2026-07-29 05:16:23 +00:00
Quentin McGaw
7f22fb3276
fix(protonvpn): support port 51820 for UDP OpenVPN
v3.41.1
2026-02-11 14:13:34 +00:00
Quentin McGaw
6909a0c123
fix(healthcheck): prevent race condition and fix #3096 ( #3123 )
2026-02-11 14:12:20 +00:00